diff --git a/routing.json b/routing.json new file mode 100644 index 0000000..61d0a53 --- /dev/null +++ b/routing.json @@ -0,0 +1,440 @@ +{ + "chairman_direct_seats": [ + "coreci-cairo", + "coreci-ceo", + "coreci-cfo", + "coreci-ciso", + "coreci-coo", + "coreci-cpo", + "coreci-cto", + "coreci-sre", + "jonathan" + ], + "chart_version": "1.2", + "custodian": "CEO from seat (Chairman pre-seat) \u2014 approval-routing row", + "drift": [ + { + "kind": "extra_chart_claim", + "org_chart_claimants": [ + "cto", + "sre" + ], + "resolution": "table wins; co-claimants ['cto'] recorded for the p06 assert (routing resolves to the row Owner only)", + "system_id": "gitea-instance", + "table_owner_seat": "sre" + }, + { + "kind": "chart_claim_without_table_row", + "org_chart_claimants": [ + "chairman" + ], + "resolution": "queue refuses this system-id at intake until a table row lands (fail-closed)", + "system_id": "ollama-mint" + }, + { + "kind": "extra_chart_claim", + "org_chart_claimants": [ + "cto", + "sre" + ], + "resolution": "table wins; co-claimants ['cto'] recorded for the p06 assert (routing resolves to the row Owner only)", + "system_id": "pve-estate", + "table_owner_seat": "sre" + } + ], + "generated_by": "scripts/p04-executor/gen-routing-table.py (stdlib; deterministic \u2014 no wall-clock fields)", + "lanes": { + "chairman_direct": "C-09 lane \u2014 Chairman (jonathan) is the sole decision authority; owning seat is audit-notified", + "manager_owner": "normal lane \u2014 requestor manager (one hop) + system owner when an owned system is touched (both listed, deduped)", + "skip_path": "unresolvable chain \u2014 approver CEO (coreci-ceo), queue Chairman (sanctioned skip-path 2)" + }, + "manager_edges": { + "coreci-cairo": "coreci-ceo", + "coreci-ceo": "jonathan", + "coreci-cfo": "coreci-ceo", + "coreci-chat-po": "coreci-hap", + "coreci-ciso": "coreci-ceo", + "coreci-clo": "coreci-ceo", + "coreci-cmo": "coreci-ceo", + "coreci-content-lead": "coreci-cmo", + "coreci-contracts-lead": "coreci-clo", + "coreci-coo": "coreci-ceo", + "coreci-cpo": "coreci-ceo", + "coreci-cto": "coreci-ceo", + "coreci-fpa-lead": "coreci-cfo", + "coreci-hap": "coreci-cpo", + "coreci-hbo": "coreci-coo", + "coreci-hep": "coreci-cpo", + "coreci-hfp": "coreci-cpo", + "coreci-hip": "coreci-cpo", + "coreci-hpe": "coreci-cto", + "coreci-nextcraft-po": "coreci-hep", + "coreci-nova-po": "coreci-hip", + "coreci-openyield-po": "coreci-hfp", + "coreci-researchx-po": "coreci-hap", + "coreci-secops-lead": "coreci-ciso", + "coreci-spec-dns": "coreci-sre", + "coreci-spec-edge": "coreci-sre", + "coreci-spec-mail": "coreci-sre", + "coreci-spec-monitors": "coreci-sre", + "coreci-spec-sop": "coreci-sre", + "coreci-sre": "coreci-cto" + }, + "manager_edges_unresolvable": [ + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-content-writer" + }, + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-finance-analyst" + }, + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-legal-researcher" + }, + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-onboarding" + }, + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-sec-analyst" + }, + { + "reason": "username null (seat unminted; mint at requisition)", + "seat_node": "spec-sre-ops" + } + ], + "never_execute": "the queue NEVER executes anything against production \u2014 decision-record only (REQ-27; scripts/p04-executor/DESIGN.md)", + "ownership_table_version": "v1.2", + "schema": "coreci.approval_queue.routing/1", + "seats": { + "coreci-cairo": { + "level": 2, + "node": "cairo", + "status": "active" + }, + "coreci-ceo": { + "level": 1, + "node": "ceo", + "status": "active" + }, + "coreci-cfo": { + "level": 2, + "node": "cfo", + "status": "active" + }, + "coreci-chat-po": { + "level": 4, + "node": "chat-po", + "status": "planned" + }, + "coreci-ciso": { + "level": 2, + "node": "ciso", + "status": "active" + }, + "coreci-clo": { + "level": 2, + "node": "clo", + "status": "planned" + }, + "coreci-cmo": { + "level": 2, + "node": "cmo", + "status": "planned" + }, + "coreci-content-lead": { + "level": 4, + "node": "content-lead", + "status": "planned" + }, + "coreci-contracts-lead": { + "level": 4, + "node": "contracts-lead", + "status": "planned" + }, + "coreci-coo": { + "level": 2, + "node": "coo", + "status": "active" + }, + "coreci-cpo": { + "level": 2, + "node": "cpo", + "status": "active" + }, + "coreci-cto": { + "level": 2, + "node": "cto", + "status": "active" + }, + "coreci-fpa-lead": { + "level": 4, + "node": "fpa-lead", + "status": "planned" + }, + "coreci-hap": { + "level": 3, + "node": "hap", + "status": "planned" + }, + "coreci-hbo": { + "level": 3, + "node": "hbo", + "status": "planned" + }, + "coreci-hep": { + "level": 3, + "node": "hep", + "status": "planned" + }, + "coreci-hfp": { + "level": 3, + "node": "hfp", + "status": "planned" + }, + "coreci-hip": { + "level": 3, + "node": "hip", + "status": "planned" + }, + "coreci-hpe": { + "level": 3, + "node": "hpe", + "status": "planned" + }, + "coreci-nextcraft-po": { + "level": 4, + "node": "nextcraft-po", + "status": "planned" + }, + "coreci-nova-po": { + "level": 4, + "node": "nova-po", + "status": "on-hold" + }, + "coreci-openyield-po": { + "level": 4, + "node": "openyield-po", + "status": "planned" + }, + "coreci-researchx-po": { + "level": 4, + "node": "researchx-po", + "status": "planned" + }, + "coreci-secops-lead": { + "level": 4, + "node": "secops-lead", + "status": "planned" + }, + "coreci-spec-dns": { + "level": 5, + "node": "zz-dns", + "status": "bench" + }, + "coreci-spec-edge": { + "level": 5, + "node": "zz-edge", + "status": "bench" + }, + "coreci-spec-mail": { + "level": 5, + "node": "zz-mail", + "status": "bench" + }, + "coreci-spec-monitors": { + "level": 5, + "node": "zz-monitors", + "status": "bench" + }, + "coreci-spec-sop": { + "level": 5, + "node": "zz-sop", + "status": "bench" + }, + "coreci-sre": { + "level": 3, + "node": "sre", + "status": "active" + }, + "jonathan": { + "level": 0, + "node": "chairman", + "status": "active" + } + }, + "sources": { + "org_chart": "company/org/org-chart.json (workspace submodule, read-only)", + "systems_ownership": [ + "docs/company/org/systems-ownership.md (this repo, authoritative)", + "company/org/systems-ownership.md (coreci/company byte-copy, equality asserted at generation)" + ] + }, + "systems": { + "agent-definitions": { + "co_owners": [], + "owned_system": "coreci/agent-definitions", + "owner": "coreci-cairo", + "owner_cell": "CAIRO", + "owner_seat": "cairo", + "routing_note": "agent-read-only; self-mod denied everywhere" + }, + "approval-routing": { + "co_owners": [], + "owned_system": "this table + org-chart.json edges", + "owner": "coreci-ceo", + "owner_cell": "CEO from seat (Chairman pre-seat)", + "owner_seat": "ceo", + "routing_note": "" + }, + "company-records": { + "co_owners": [], + "owned_system": "coreci/company (constitution, registry, org, standards)", + "owner": "coreci-ceo", + "owner_cell": "CEO from seat (Chairman pre-seat)", + "owner_seat": "ceo", + "routing_note": "registry maintenance RACI = CAIRO (standards/registry-maintenance.md)" + }, + "edge-haproxy": { + "co_owners": [], + "owned_system": "haproxy-1 SNI/TCP frontends + LE TLS", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "" + }, + "employee-homes-standard": { + "co_owners": [], + "owned_system": "home-repo scaffold + opencode.json canonicals + drift monitors", + "owner": "coreci-cairo", + "owner_cell": "CAIRO", + "owner_seat": "cairo", + "routing_note": "per-home operational state owned by the employee" + }, + "employee-runner-fleet": { + "co_owners": [], + "owned_system": "employee-* runner LXCs + opencode image", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "digest pin D-112; label changes SRE-owned" + }, + "executor-service": { + "co_owners": [], + "owned_system": "executor.coreci.dev approval queue (LXC 116/117)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre (service)", + "owner_seat": "sre", + "routing_note": "routing-map custody = CEO (Chairman pre-seat); repos frozen" + }, + "gitea-instance": { + "co_owners": [], + "owned_system": "git.coreci.dev (Gitea 1.26.1)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre (CTO at seat)", + "owner_seat": "sre", + "routing_note": "instance admin class = Chairman-direct for coreci-sre requests" + }, + "meetings": { + "co_owners": [], + "owned_system": "coreci/meetings (transcripts, labels, issues)", + "owner": "coreci-coo", + "owner_cell": "COO", + "owner_seat": "coo", + "routing_note": "transcript freshness + action-item aging monitors" + }, + "models-catalog": { + "co_owners": [ + "jonathan" + ], + "owned_system": "agent-definitions/models/catalog.json + ollama keys", + "owner": "coreci-cairo", + "owner_cell": "CAIRO (catalog + quarterly rotation); Chairman (wave mints)", + "owner_seat": "cairo", + "routing_note": "spend-jump rows escalate to Chairman (D-169)" + }, + "notify-ladder": { + "co_owners": [], + "owned_system": "Matrix + SMTP + ntfy alert ladder", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "URLs live in Bao KV" + }, + "observability": { + "co_owners": [], + "owned_system": "Kuma (LXC 118) + Pomerium (LXC 120)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "" + }, + "openbao": { + "co_owners": [], + "owned_system": "bao.coreci.dev (IDP + secrets)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "AppRole/KV schema changes = CAIRO + SRE joint" + }, + "products": { + "co_owners": [], + "owned_system": "product repos (researchx, nextcraft, coreci-chat, nova-platform, openyield, acdl)", + "owner": "coreci-cpo", + "owner_cell": "CPO + product POs (post-hire ratification)", + "owner_seat": "cpo", + "routing_note": "portfolio actions = owner approval per constitution #3" + }, + "pve-estate": { + "co_owners": [], + "owned_system": "Proxmox VE + LXC estate", + "owner": "coreci-sre", + "owner_cell": "coreci-sre (CTO at seat)", + "owner_seat": "sre", + "routing_note": "pipeline-only mutations (operator mandate)" + }, + "security-posture": { + "co_owners": [], + "owned_system": "security/compliance posture + incident policy", + "owner": "coreci-ciso", + "owner_cell": "CISO at seat (coreci-sre interim)", + "owner_seat": "ciso", + "routing_note": "RED-class skips path \u2192 CISO + CEO + Chairman" + }, + "sre-repo": { + "co_owners": [], + "owned_system": "coreci/sre (SOPs, workflows, IaC)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "" + }, + "stalwart": { + "co_owners": [], + "owned_system": "stalwart-1 mail (cloudinit.dev + coreci.dev internal-only)", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "D-086 assert monthly; policy row Chairman-direct" + }, + "technitium-dns": { + "co_owners": [], + "owned_system": "dns.coreci.dev authoritative zones", + "owner": "coreci-sre", + "owner_cell": "coreci-sre", + "owner_seat": "sre", + "routing_note": "coreci.dev zone policy = Chairman veto (D-086: never external MX)" + }, + "workforce-ledger": { + "co_owners": [], + "owned_system": "company/org/workforce/ (dossiers, skill matrix)", + "owner": "coreci-cairo", + "owner_cell": "CAIRO", + "owner_seat": "cairo", + "routing_note": "" + } + } +}